Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: r+039xtNE0kg9Zvhjv4c05N5uVLykm6Nd7ZqX3r4Mdg=
Subject key identifier: B3:DA:CA:74:99:14:A0:64:15:09:37:B3:67:3A:92:FF:39:5C:40:7C
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 019778D453C1557129256835A5989F21AB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 1596
Signing time: Mon 16 Jun 2025 13:01:10 +0000
Manifest this update: Mon 16 Jun 2025 13:01:10 +0000
Manifest next update: Tue 17 Jun 2025 13:01:10 +0000
Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: wFm/kO5gLBBOrJ8BHTkrNDbiPeZZuTBe6q7v1U9AuNU=)
2: sA1HdIpnNshvOPJPgaGNIhZrUb8.roa (hash: 7Bi1HUyjDkybQXNM/TN4TmwGL8in9oSgJiNHpva8HX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:53:c1:55:71:29:25:68:35:a5:98:9f:21:ab:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Jun 16 13:01:10 2025 GMT
Not After : Jun 17 13:01:10 2025 GMT
Subject: CN=b3daca749914a064150937b3673a92ff395c407c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:c2:73:14:78:6d:a6:82:8c:15:d8:8e:0c:
d1:f0:55:65:b4:ab:15:8e:cf:13:ce:13:ea:3b:df:
db:de:b0:92:37:71:1a:49:1c:67:22:c3:9d:e2:12:
83:ae:75:07:43:de:66:7b:94:69:a4:f2:9e:75:c9:
5a:ba:1e:f9:a4:22:7f:f5:2d:66:26:cf:8d:68:53:
f9:1f:2d:c3:02:f8:e8:c7:68:7d:43:28:18:f0:69:
27:f6:80:f6:42:f9:35:90:29:3c:05:76:b9:2a:f8:
36:f9:e1:65:02:6e:f9:7f:00:1b:b3:42:bd:1b:a7:
c1:7f:99:13:13:b1:e0:7f:fa:02:38:37:d4:0a:49:
6e:7d:c8:09:4e:d0:8d:a4:bd:a8:fe:69:f9:53:5e:
13:4a:84:1e:bc:a0:24:00:a5:f1:bf:d7:d6:2b:f6:
65:98:c7:55:7c:30:03:02:cf:ff:5c:a4:ec:c4:71:
b1:d0:63:d0:dc:0f:10:28:f7:6e:0b:8c:2e:dc:15:
5c:50:77:18:9a:2b:a2:d4:1b:e9:e5:88:1c:61:d4:
1e:13:a0:fd:2e:6a:0e:b1:81:46:34:15:ec:1c:48:
bf:b4:bb:58:19:f5:7b:9f:fd:0b:b5:07:7c:f6:4c:
d9:e3:3b:9c:9d:a2:9b:32:ea:d1:8d:fd:8f:90:9e:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DA:CA:74:99:14:A0:64:15:09:37:B3:67:3A:92:FF:39:5C:40:7C
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6c:64:41:a3:59:41:3e:d2:f4:27:f9:ae:e9:0a:d5:a7:c5:
99:f1:09:32:e0:93:51:b6:a3:76:f9:11:4b:ff:47:21:f0:62:
fd:15:06:52:b2:9d:b8:00:91:37:0f:50:68:91:c7:e6:b6:e9:
8e:52:e9:55:d3:cb:28:88:69:c0:27:89:4d:e5:0c:ad:fd:95:
0c:d5:b4:ae:81:7a:cd:7f:45:ba:4d:47:d7:59:1c:f7:ef:a7:
1a:d5:c9:12:1e:37:5c:81:54:78:57:30:5e:22:1c:16:d5:b2:
5b:ba:1a:6f:64:b2:79:96:de:f7:c6:b5:66:f0:2d:32:0c:bb:
79:c0:30:6f:71:c4:4d:5c:9b:e5:55:1c:31:81:f5:74:15:cc:
9b:ac:b6:41:46:9c:84:8b:d9:08:2b:31:a8:c3:5c:a2:c7:0b:
9a:31:98:85:38:f5:09:bc:c3:90:95:18:02:09:97:85:1a:22:
7b:49:db:96:2f:76:18:f3:c7:79:0d:36:85:eb:15:3e:9d:2d:
10:29:f3:fc:79:46:86:48:2b:ec:38:eb:43:7b:23:5e:b3:1a:
1c:d0:f5:8d:49:21:76:18:bc:72:18:fb:50:a8:b2:f7:b3:38:
e7:75:10:5e:bb:2a:85:3b:f0:cf:33:d8:56:f6:84:77:2b:a0:
85:0d:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:43:09 2025 by rpki-client